$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa File: OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa (raw, json) Hash identifier: k7BQbqH6pSNjotDWGgcdbxHAkmfchoEFXuDTxjd+ffI= Subject key identifier: 39:83:6B:07:83:7F:C5:30:F8:21:C7:36:8D:6C:D1:17:C4:1D:6A:CF Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A30 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa Signing time: Fri 01 Sep 2023 10:07:36 +0000 ROA not before: Fri 01 Sep 2023 10:07:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 123.193.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10800 (0x2a30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=39836B07837FC530F821C7368D6CD117C41D6ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:fb:a9:bf:7b:8e:ba:b6:f9:d3:73:06:59: f8:5d:97:2a:60:a9:5d:07:fd:6d:2f:a4:ad:82:5b: 8b:de:69:cd:84:cb:76:40:7e:a6:fa:d0:f4:10:2e: 1f:20:ac:36:fb:0d:40:46:02:47:78:8d:03:e6:3d: 63:b1:19:97:50:f6:0c:9d:cc:1b:31:99:a1:98:90: 0c:75:14:1b:d8:22:74:18:f7:ba:92:cf:c7:f3:80: 01:e7:08:65:79:03:dd:6e:f3:73:a9:8e:6f:37:02: 38:6b:0b:da:c5:6a:3a:00:05:be:40:7e:78:64:6f: 43:a2:4b:63:c4:c0:94:af:c0:93:a1:a9:d4:06:05: 88:31:4d:02:bb:ad:f1:22:0f:02:8e:5a:17:b0:1a: 83:82:d3:dc:9a:00:58:0c:44:53:8b:8d:74:19:e0: 8a:f3:01:15:4f:cc:1b:87:77:ba:46:ad:9b:4b:71: 1f:4d:9b:4c:7d:8c:99:ea:37:54:27:38:89:90:1c: 4e:82:cc:c9:75:50:0d:74:53:c2:1f:d7:11:13:52: f1:76:c1:71:82:db:f6:57:28:43:6b:cd:2c:ca:42: f7:14:a7:20:c5:99:5c:d8:17:6a:bc:84:39:7a:63: e6:71:28:00:f7:74:ff:96:07:c7:c4:f3:b4:0e:f9: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:6B:07:83:7F:C5:30:F8:21:C7:36:8D:6C:D1:17:C4:1D:6A:CF X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OYNrB4N_xTD4Icc2jWzRF8Qdas8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.193.198.0/23 Signature Algorithm: sha256WithRSAEncryption 53:19:4c:c1:26:3b:47:ce:23:15:7d:b3:f1:9b:f8:bb:f9:e7: b4:2e:55:07:9f:77:25:c6:ad:b9:2c:ce:83:32:22:e3:3f:66: c6:bc:b8:bf:3d:7b:93:64:14:66:c4:32:c1:73:2a:5d:56:6e: 9b:0e:1a:f5:f8:c5:e4:8e:5d:29:c1:76:b4:a2:4b:37:ff:e2: 78:95:49:2e:fa:05:60:98:e0:48:fd:57:6e:86:56:55:59:0f: 97:93:18:1b:55:aa:86:cb:14:b2:bc:88:04:a6:10:ee:d7:4e: c5:b4:a2:14:49:7c:b1:35:f4:39:6a:1e:8b:a9:9c:02:d2:5c: 8b:ba:f0:cc:c8:c1:48:89:2c:f1:1b:56:6b:69:04:0a:a9:36: 02:38:7f:94:84:88:8a:f9:d1:e0:b0:74:6f:f0:8f:c8:75:86: e9:fd:60:11:df:69:35:41:1a:2e:43:21:15:35:b1:96:95:49: 57:a2:e9:27:41:3c:2c:1a:ac:bb:53:f4:a9:43:c0:be:49:0d: 30:3a:4c:e3:7b:19:41:b0:16:11:24:74:c4:97:40:06:d3:72: 57:3a:32:c1:93:84:85:c8:b6:ef:8b:4b:64:e2:2f:da:7d:61: 2d:90:6c:a5:2b:b9:4a:df:b7:04:da:37:87:82:8c:c9:ad:50: 5f:5a:a1:76 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM5ODM2QjA3ODM3RkM1 MzBGODIxQzczNjhENkNEMTE3QzQxRDZBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzhPupv3uOurb503MGWfhdlypgqV0H/W0vpK2CW4veac2Ey3ZA fqb60PQQLh8grDb7DUBGAkd4jQPmPWOxGZdQ9gydzBsxmaGYkAx1FBvYInQY97qS z8fzgAHnCGV5A91u83Opjm83AjhrC9rFajoABb5Afnhkb0OiS2PEwJSvwJOhqdQG BYgxTQK7rfEiDwKOWhewGoOC09yaAFgMRFOLjXQZ4IrzARVPzBuHd7pGrZtLcR9N m0x9jJnqN1QnOImQHE6CzMl1UA10U8If1xETUvF2wXGC2/ZXKENrzSzKQvcUpyDF mVzYF2q8hDl6Y+ZxKAD3dP+WB8fE87QO+WgnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUOYNrB4N/xTD4Icc2jWzRF8Qdas8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09ZTnJCNE5feFRENEljYzJq V3pSRjhRZGFzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7 wcYwDQYJKoZIhvcNAQELBQADggEBAFMZTMEmO0fOIxV9s/Gb+Lv557QuVQefdyXG rbkszoMyIuM/Zsa8uL89e5NkFGbEMsFzKl1WbpsOGvX4xeSOXSnBdrSiSzf/4niV SS76BWCY4Ej9V26GVlVZD5eTGBtVqobLFLK8iASmEO7XTsW0ohRJfLE19DlqHoup nALSXIu68MzIwUiJLPEbVmtpBAqpNgI4f5SEiIr50eCwdG/wj8h1hun9YBHfaTVB Gi5DIRU1sZaVSVei6SdBPCwarLtT9KlDwL5JDTA6TON7GUGwFhEkdMSXQAbTclc6 MsGThIXItu+LS2TiL9p9YS2QbKUruUrftwTaN4eCjMmtUF9aoXY= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:05 2024 by rpki-client on console-fra.rpki-client.org